$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft File: gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft (raw, json) Hash identifier: bmWAUtj6hdOto5ydTEhmrh1fYBrzFOdHgJAFip1rGbM= Subject key identifier: 31:14:15:06:08:D9:B6:E2:E0:5D:E5:84:0D:A7:A5:52:3D:39:CA:E1 Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Certificate serial: 35C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft Manifest number: 351C Signing time: Fri 22 Aug 2025 14:44:24 +0000 Manifest this update: Fri 22 Aug 2025 14:44:23 +0000 Manifest next update: Fri 29 Aug 2025 14:44:23 +0000 Files and hashes: 1: gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl (hash: xQS8bR8m6cY7q/P8689oM7z6RBSB65p0sQOZenb5yUE=) 2: 8C7BC30E5B7E11F0AA42172EC4F9AE02.roa (hash: T4ooPvrdLBAfiayLnI4MRWTb1Jb1klBjv7+Ml585mqQ=) 3: 24108E38125C11EFA53AA21EC4F9AE02.roa (hash: gQzWJHoaUz+ZsxQT6VbHPTnmepZXOupiiqIe2nIrQsI=) 4: A98C92A0340411E9A22CD05CC4F9AE02.roa (hash: 2jXUTHIbe/4zB55x5aVqbJ++TpfrSTqoaosirfZlKp4=) 5: 26CCB614E0D011E9B0E8C36FC4F9AE02.roa (hash: kC85zV9vfowONrQ/4lH4osyAc/gnJivigTW1tOC5o5I=) 6: 7E04A27C33F911E98674843BC4F9AE02.roa (hash: MUiCEFkOTO4FtkjvpufTX4GTFRhCPjdetQYvgSwrwG0=) 7: AACC7DA6340411E9A22CD05CC4F9AE02.roa (hash: 7vOKeyVZ+3C3IU2Q2LWPiPgpmUgrqFfYYBhoSV6xIdA=) 8: A8ED77E2340411E9A22CD05CC4F9AE02.roa (hash: tmtO11OOtDriXyiX8yIjjm/tLba1skzLPKICGtpamPs=) 9: 7D883CF033F911E98674843BC4F9AE02.roa (hash: kvRz79x323/sz1CS5sLMmHqk7HExlk2aKA5DVgo+je4=) 10: AA2A006C340411E9A22CD05CC4F9AE02.roa (hash: cjk5XxryDCD9iYNOdFDhTcqSurq/6QehBRcXynDGfWE=) 11: A8689054340411E9A22CD05CC4F9AE02.roa (hash: 9Abm2hwP5n1eigQRbM/2Ald4kJwUC5p7xAvKRar2kxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13764 (0x35c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Validity Not Before: Aug 22 14:44:23 2025 GMT Not After : Aug 29 14:44:23 2025 GMT Subject: CN=68a88248-523e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:bf:8b:e3:64:ea:3e:8d:fb:50:77:17:3e: 96:64:13:f1:bc:42:03:ec:68:7a:22:7a:9f:8e:df: 2e:18:5d:06:fb:c4:1d:fe:61:e0:3d:75:9f:5b:a3: ab:cb:c4:e9:bf:9c:18:e7:bb:b3:67:9a:ec:e4:d6: 54:ae:01:3b:86:15:65:67:ab:36:9e:af:33:ba:25: 49:c5:55:31:e7:45:49:2d:f8:0e:ec:b4:8f:cf:51: 42:40:eb:22:db:ee:09:a5:05:ba:49:3d:81:51:d4: aa:9f:9a:dc:fe:59:76:e2:b7:98:02:fd:f6:2e:9a: 0d:4b:40:4c:05:b9:5d:69:29:67:50:77:a4:cb:1a: 7f:7c:9d:b9:0c:bb:cc:b3:e0:a3:58:dd:8e:c7:eb: 24:61:0e:b4:27:8e:ed:a6:83:46:5d:f5:c1:c1:ab: 32:df:b1:3d:85:64:cc:5d:f6:0b:0a:45:51:dc:96: 8b:00:de:39:c6:b5:43:7c:ae:9c:c1:4b:b4:21:cc: bf:9f:cf:9a:65:e3:68:2e:77:fc:8d:60:36:23:b2: cc:86:dc:a5:25:f9:9b:6d:64:62:b9:5d:1c:18:28: b3:36:15:cf:85:fa:42:84:dd:af:77:1e:e2:0f:cf: 66:16:e7:e4:87:ab:04:c2:6e:ae:10:10:18:ec:7f: 63:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:14:15:06:08:D9:B6:E2:E0:5D:E5:84:0D:A7:A5:52:3D:39:CA:E1 X509v3 Authority Key Identifier: keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:e3:d6:ef:ab:7b:88:52:89:36:65:0b:74:a5:03:d9:be:d4: c0:fc:41:7a:83:0e:0d:7d:95:8b:3e:61:8e:56:26:7a:55:b5: e5:61:55:df:8f:00:09:c0:c8:a4:74:c7:7f:6f:15:9b:3f:c5: ce:c4:d9:15:7c:81:2f:17:02:3f:ed:6f:ae:86:ba:1e:4c:00: f9:9d:27:12:e2:f4:68:ba:6c:47:b0:2f:84:2a:2a:50:3c:8d: 35:3a:9f:9f:04:03:ad:e0:82:08:7d:eb:66:6a:73:1f:3a:4c: 36:03:14:89:06:ad:20:7a:01:4a:c4:a2:cf:61:b5:c0:3d:2e: 11:5d:5b:c9:e9:f1:5d:f4:ce:53:60:6c:c3:cd:37:0f:36:82: 75:57:6e:c7:d3:09:53:96:b9:a9:22:8c:ee:cb:67:23:dc:b6: 0e:d2:df:36:fc:b5:ee:4e:27:cd:36:e1:9c:7e:67:44:9c:16: 27:3c:c4:6b:79:99:0f:04:b9:76:41:48:9e:7c:24:09:09:22: b8:c9:b8:65:6f:ce:ed:29:e1:1e:64:08:30:cf:0e:98:e1:11: c1:e9:e0:72:fb:6e:90:b7:48:49:fc:aa:f3:b7:53:e9:b0:60: ed:dd:02:78:f7:38:21:cf:25:af:d0:e0:65:15:5a:89:74:31: 1f:c6:2c:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzMTgxMTAvBgNVBAUTKDgwNkFCRkY0NjM1OTRDQUEzMERFNzBBMzExQUUyRjg0 OTE4OUJDNjQwHhcNMjUwODIyMTQ0NDIzWhcNMjUwODI5MTQ0NDIzWjAYMRYwFAYD VQQDEw02OGE4ODI0OC01MjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbS/i+Nk6j6N+1B3Fz6WZBPxvEID7Gh6Inqfjt8uGF0G+8Qd/mHgPXWfW6Or y8Tpv5wY57uzZ5rs5NZUrgE7hhVlZ6s2nq8zuiVJxVUx50VJLfgO7LSPz1FCQOsi 2+4JpQW6ST2BUdSqn5rc/ll24reYAv32LpoNS0BMBbldaSlnUHekyxp/fJ25DLvM s+CjWN2Ox+skYQ60J47tpoNGXfXBwasy37E9hWTMXfYLCkVR3JaLAN45xrVDfK6c wUu0Icy/n8+aZeNoLnf8jWA2I7LMhtylJfmbbWRiuV0cGCizNhXPhfpChN2vdx7i D89mFufkh6sEwm6uEBAY7H9jwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEUFQYI 2bbi4F3lhA2npVI9OcrhMB8GA1UdIwQYMBaAFIBqv/RjWUyqMN5woxGuL4SRibxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTMxOC9EQzc0NTFGMjFE OTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRLb3czbkNqRWE0dmhKR0p2 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHcV85R05aVEtvdzNuQ2pFYTR2aEpHSnZHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTMxOC9EQzc0NTFGMjFEOTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRL b3czbkNqRWE0dmhKR0p2R1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk49bvq3uIUok2ZQt0pQPZvtTA/EF6gw4NfZWLPmGOViZ6VbXlYVXf jwAJwMikdMd/bxWbP8XOxNkVfIEvFwI/7W+uhroeTAD5nScS4vRoumxHsC+EKipQ PI01Op+fBAOt4IIIfetmanMfOkw2AxSJBq0gegFKxKLPYbXAPS4RXVvJ6fFd9M5T YGzDzTcPNoJ1V27H0wlTlrmpIozuy2cj3LYO0t82/LXuTifNNuGcfmdEnBYnPMRr eZkPBLl2QUiefCQJCSK4ybhlb87tKeEeZAgwzw6Y4RHB6eBy+26Qt0hJ/Krzt1Pp sGDt3QJ49zghzyWv0OBlFVqJdDEfxiyh -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:35 2025 by rpki-client